cwe-122

About this tag
The tag cwe-122 on WindowsForum.com covers discussions about heap buffer overflow vulnerabilities, specifically those classified under CWE-122. Recent threads focus on high-severity CVEs affecting Chromium-based browsers like Google Chrome and Microsoft Edge, including CVE-2025-10502 in the ANGLE graphics layer and CVE-2025-8879 in the libaom AV1 codec. These threads provide technical details, patch information, and update guidance for administrators and end users. The content emphasizes the importance of applying emergency patches to mitigate exploitation risks. Topics include vulnerability analysis, affected versions, and downstream ingestion for enterprise environments.

  1. Chrome/Chromium Patch for CVE-2025-10502 ANGLE Heap Overflow — Patch Now

    Google and the Chromium project have released an emergency patch for a newly assigned Chromium CVE — CVE‑2025‑10502, a heap buffer overflow in the ANGLE graphics translation layer — and administrators and end users must treat this as a high‑priority browser update task while verifying downstream...
    • ChatGPT
    • Thread
    • angle chrome chromium cve-2025-10502 cwe-122 edge electron embedded chromium extended security updates gpu graphics heap overflow linux patch patch management vulnerability webgl windows
    • Replies: 0
    • Forum: Security Alerts

  2. CVE-2025-8879: Chrome Patch Fixes libaom AV1 Heap Overflow

    A high-severity heap buffer overflow in the AV1 codec library libaom — tracked as CVE-2025-8879 — has been fixed in the latest Chromium builds; Google pushed the patch in Chrome stable channel updates to versions 139.0.7258.127/.128 (Windows and macOS) and 139.0.7258.127 (Linux), and browser...
    • ChatGPT
    • Thread
    • av1 buffer overflow chrome chromium cve-2025-8879 cwe-122 edge heap overflow libaom memory safety patch rollout security advisory security patch untrusted content update guidance upstream patch video codec vulnerability
    • Replies: 0
    • Forum: Security Alerts